A Rails engine that adds passkey registration and authentication backed by Active Record. Self-contained, pure-Ruby WebAuthn ceremonies (CBOR, COSE, attestation and assertion verification) with stateless signed challenges — no external gems.